CLAIMS 

1 1 . (currently amended) A .unitary portable biometrics-based access control device 

2 which can be directly plugged into a universal serial bus (TJSB) socket communicatively 

3 coupled to a restricted resource, the device comprising: 

4 a housing; 

5 a microprocessor housed within the housing; 

6 a USB plug integrated into the housing without an intervening cable and capable of 

7 coupling the unitary portable access control device directly to the USB socket ; and 

8 a biometrics-based authentication module coupled to and controlled by the 

9 microprocessor, at least a portion of the biometrics-based authentication module being 

1 0 housed within the housing, wherein access to a r e strict e d r e sourc e , the restricted resource 

1 1 having a communication port communicatively coupled to th e portabl e device, is granted to a 

12 user provided that the biometrics-based authentication module authenticates the user's 

13 identity and wherein access to the restricted resource is denied to the user otherwise. 

1 2. (previously presented) The portable device as recited in Claim 1 wherein the 

2 biometrics-based authentication module is a fingerprint authentication module. 

1 3. (currently amended) The portable device as recited in Claim 1 which is 

2 communicativ e ly coupl e d to th e communication port of th e r e strict e d r e sourc e via a univ e rsal 

3 s erial bus (USB) wherein the biometrics-based authentication module is an iris scan 

4 authentication module . 

1 4. (currently amended) The portable device as recited in Claim 1 wherein the 

2 biometrics-based authentication module comprises a biometrics sensor fitted on one surface 

3 of the portabl e d e vic e housing . 
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1 5. (currently amended) The portable device as recited in Claim 1 further 

2 comprising a non-volatile memory capable e^-of storing biometrics information usable for 

3 authentication. 

1 6. (previously presented) The portable device as recited in Claim 1 wherein the 

2 microprocessor is configured to provide a bypass mechanism for authentication upon a 

3 determination of authentication failure by the biometrics-based authentication module. 

1 7. (previously presented) The portable device as recited in Claim 1 wherein the 

2 restricted resource comprises a host computer. 

1 8. (previously presented) The portable device as recited in Claim 1 wherein the 

2 restricted resource comprises a communication network. 

1 9. (previously presented) The portable device as recited in Claim 1 wherein the 

2 restricted resource is a real estate premises that imposes access restrictions. 

1 10. (previously presented) The portable device as recited in Claim 1 wherein the 

2 restricted resource is an operable machinery, the safe operation of which requires training. 

1 11. (currently amended) A biometrics-based access control system for controlling 

2 access to a restricted resource, comprising: 

3 a portable device which can be directly plugged into a universal serial bus (USB) 

4 socket communicatively coupled to the restricted resource and which includes a housing; a 

5 non-volatile memory housed within the housing; a USB plug integrated into the housing 

6 without an intervening cable and capable of coupling the portable device directly to the USB 

7 socket; and a biometrics-based authentication module coupled-therete to the non-volatile 

8 memory, wherein the biometrics-based authentication module is configured to (1) capture a 

9 first biometrics marker; (2) store the first biometrics marker in the non-volatile memory; (3) 
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10 capture a second biometrics marker; and (4) determine whether the second biometrics marker 

1 1 can be authenticated against the first biometrics marker, and wherein access to the restricted 

12 resource is granted upon a determination of successful authentication and wherein access to 

1 3 the restricted resource is denied otherwise. 

1 1 2. (previously presented) The biometrics-based access control system as recited 

2 in Claim 1 1 wherein the biometrics-based authentication module is a fingerprint 

3 authentication module. 

1 13. (currently amended) The biometrics-based access control system as recited in 

2 Claim 1 1 wherein th e portabl e device is communicatively coupled to a communication port 

3 of th e r e strict e d r e sourc e via a univ e rsal s e rial bus (USB) the biometrics-based authentication 

4 module is an iris scan authentication module . 

1 14. (currently amended) The biometrics-based access control system as recited in 

2 Claim 1 1 wherein the biometrics-based authentication module comprises a biometrics sensor 

3 which is structurally integrated with the portable device in a unitary construction, the 

4 biometrics sensor being disposed on one surface of the housing of t he portable device. 



1 15. (previously presented) The biometrics-based access control system as recited 

2 in Claim 1 1 wherein the non-volatile memory of the portable device comprises flash memory. 

1 1 6. (previously presented) The biometrics-based access control system as recited 

2 in Claim 1 1 wherein a bypass mechanism for authentication is provided upon a determination 

3 of authentication failure by the biometrics-based authentication module. 

1 17. (currently amended) A biometrics-based access control method for controlling 

2 access to a restricted resource and implemented using a portable device, the method 

3 comprising the steps of: 
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4 fa) directly plugging the portable device into a universal serial bus (USB) socket 

5 communicatively coupled to the restricted resource, wherein the portable device includes a 

6 housing; a memory; a biometrics sensor; and a USB plug integrated into the housing without 

7 an intervening cable and capable of coupling the portable device directly to the USB socket; 

8 obtaining a first biometrics marker from a user with a-the biometrics sensor 

9 install e d on of the portable device; 

10 (b)(c) retrieving a registered biometrics marker from a-the memory of the portable 

1 1 device, the registered biometrics marker having been stored therein during a registration 

12 process; 

13 te)(d) comparing the first biometrics marker against the registered biometrics 

14 marker; and 

1 5 (d){e) granting the user access to the restricted resource provided that a match is 

16 identified in said step (e)(d}. 

1 1 8. (previously presented) The biometrics-based access control method as recited 

2 in Claim 17 wherein the registered biometrics marker is a fingerprint. 

1 1 9. (previously presented) The biometrics-based access control method as recited 

2 in Claim 17 wherein the registered biometrics marker is stored in an encrypted format. 

1 20. (currently amended) The biometrics-based access control method as recited in 

2 Claim 1 7 further comprising the step of denying the user access to the restricted resource 

3 provided that a match is not identified in said step (e){d). 

1 21. (currently amended) The biometrics-based access control method as recited in 

2 Claim 17 further comprising the step of providing the user with a bypass authentication 

3 procedure provided that a match is not identified in said step (e)£d). 



PALOALTO 53253 (2K) "5" 



